Semgrep — статический анализ кода из агента

integrations

Semgrep is a Claude Code skill that connects the agent to Semgrep via Membrane CLI for managing static code analysis directly from the agent. It supports scanning files and repositories, managing rules, policies, projects, findings, and secrets through natural language commands. Available actions include searching scans over the past 30 days, bulk triaging findings, listing dependencies and detected secrets, toggling Managed Scans, and updating or deleting projects. Membrane handles authentication and token refresh automatically — a Membrane account (Free tier supported) and network access are required. The skill is built for developers and security engineers who want to automate code review workflows or audit a codebase for vulnerabilities without leaving their AI agent environment.